Home › Security › secobserve-mcp

secobserve-mcp

MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.

Python CloudLocal macOSWindowsLinux

★ 2 stars Last pushed 2026-09-25 License: MIT

View repository →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (pypi 1.0.0)

uvx secobserve-mcp

Or add to your MCP client config:

{
  "mcpServers": {
    "secobserve-mcp": {
      "command": "uvx",
      "args": [
        "secobserve-mcp"
      ],
      "env": {
        "SECOBSERVE_BASE_URL": "<YOUR_VALUE>",
        "SECOBSERVE_API_TOKEN": "<YOUR_VALUE>"
      }
    }
  }
}

SECOBSERVE_BASE_URL required — SecObserve base URL without /api, e.g. https://secobserve.example.com
SECOBSERVE_API_TOKEN required secret — SecObserve user or product API token
SECOBSERVE_READ_ONLY — Set to true to refuse every write operation
SECOBSERVE_ALLOW_DELETE — Set to true to enable the delete tool; deletion cascades and is irreversible

Package (oci)

docker run -i --rm -e SECOBSERVE_BASE_URL=<YOUR_VALUE> -e SECOBSERVE_API_TOKEN=<YOUR_VALUE> ghcr.io/nh4ttruong/secobserve-mcp:1.0.0

Or add to your MCP client config:

{
  "mcpServers": {
    "secobserve-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SECOBSERVE_BASE_URL=<YOUR_VALUE>",
        "-e",
        "SECOBSERVE_API_TOKEN=<YOUR_VALUE>",
        "ghcr.io/nh4ttruong/secobserve-mcp:1.0.0"
      ]
    }
  }
}

SECOBSERVE_BASE_URL required — SecObserve base URL without /api, e.g. https://secobserve.example.com
SECOBSERVE_API_TOKEN required secret — SecObserve user or product API token
SECOBSERVE_READ_ONLY — Set to true to refuse every write operation
SECOBSERVE_ALLOW_DELETE — Set to true to enable the delete tool; deletion cascades and is irreversible

This server takes extra arguments — see its repository.